SQL Server Forums
Profile | Register | Active Topics | Members | Search | Forum FAQ
 
Register Now and get your question answered!
Username:
Password:
Save Password
Forgot your Password?

 All Forums
 SQL Server 2005 Forums
 SQL Server Administration (2005)
 Update permission
 New Topic  Reply to Topic
 Printer Friendly
Author Previous Topic Topic Next Topic  

GaryTurpin
Starting Member

4 Posts

Posted - 05/12/2008 :  16:18:59  Show Profile  Reply with Quote
I only give a user permission to update and connect to the database and I get an error that I need select permission as well when I run an update. Is this normal? I also have the same issue with delete permission and needing select permission. Thanks for any help you provide.

sodeep
Flowing Fount of Yak Knowledge

USA
7174 Posts

Posted - 05/12/2008 :  16:23:53  Show Profile  Reply with Quote
Is it for specific object or whole database?
Go to Top of Page

GaryTurpin
Starting Member

4 Posts

Posted - 05/12/2008 :  16:26:07  Show Profile  Reply with Quote
It is for the entire database for userUpdate.
Go to Top of Page

sodeep
Flowing Fount of Yak Knowledge

USA
7174 Posts

Posted - 05/12/2008 :  16:27:46  Show Profile  Reply with Quote
give him db_datareader and db_datawriter permission.
Go to Top of Page

tkizer
Almighty SQL Goddess

USA
37471 Posts

Posted - 05/12/2008 :  16:35:18  Show Profile  Visit tkizer's Homepage  Reply with Quote
GaryTurpin,

This is not normal. I am not able to reproduce your problem. I created a table in one of my databases, created a login, added the login to the database, granted update to the new table and then logged in with my new user and was able to update the table without any other permissions.

Please post your update statement.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Database maintenance routines:
http://weblogs.sqlteam.com/tarad/archive/2004/07/02/1705.aspx
Go to Top of Page

GaryTurpin
Starting Member

4 Posts

Posted - 05/12/2008 :  16:37:43  Show Profile  Reply with Quote
This would give me permissions to insert, delete, select, and update but I am trying to limit permission. The reason behind this is to help prevent from sql injection on our website.
Go to Top of Page

tkizer
Almighty SQL Goddess

USA
37471 Posts

Posted - 05/12/2008 :  16:39:07  Show Profile  Visit tkizer's Homepage  Reply with Quote
Did you see my post?

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Database maintenance routines:
http://weblogs.sqlteam.com/tarad/archive/2004/07/02/1705.aspx
Go to Top of Page

GaryTurpin
Starting Member

4 Posts

Posted - 05/12/2008 :  16:42:38  Show Profile  Reply with Quote
I just saw that. Thank you.
Go to Top of Page

sodeep
Flowing Fount of Yak Knowledge

USA
7174 Posts

Posted - 05/12/2008 :  16:47:18  Show Profile  Reply with Quote
"It is for the entire database for userUpdate."

so you need only for specific objects.
Go to Top of Page

tkizer
Almighty SQL Goddess

USA
37471 Posts

Posted - 05/12/2008 :  16:51:10  Show Profile  Visit tkizer's Homepage  Reply with Quote
sodeep, your first question wasn't clear. He interpreted your question to mean "are you getting the error on all objects", whereas your question was "do you want the permissions on all objects". Next time, be more clear.

Tara Kizer
Microsoft MVP for Windows Server System - SQL Server
http://weblogs.sqlteam.com/tarad/

Database maintenance routines:
http://weblogs.sqlteam.com/tarad/archive/2004/07/02/1705.aspx
Go to Top of Page
  Previous Topic Topic Next Topic  
 New Topic  Reply to Topic
 Printer Friendly
Jump To:
SQL Server Forums © 2000-2009 SQLTeam Publishing, LLC Go To Top Of Page
This page was generated in 0.08 seconds. Powered By: Snitz Forums 2000